Privacy Policy

Introduction

Welcome to The Cryptid Cornucopia (“we,” “us,” “our”). We are committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly.

This Privacy Policy outlines how we collect, use, share, and protect your personal information when you visit our ecommerce website.

Data Collection

We collect various types of personal data from our users to provide and improve our services. Here are the categories of data we collect:

• Personal Information: This includes your name, email address, and phone number, which we use for account creation and order processing.
• Payment Details: We collect your credit card information solely for processing transactions and preventing fraudulent activities.
• Address Information: We collect your shipping address to ensure your orders are delivered to the correct location.
• Browsing and Purchase History: This data helps us offer personalized recommendations and perform marketing analytics.
• Communication Data: Includes emails and messages for customer support and marketing communications.
• Device Information: We collect your IP address and browser type to help us understand how our website is used and improve its functionality.

• Account Management: Personal information is used to manage your account and provide customer service.
• Order Processing: Payment details are used solely for transaction processing and fraud prevention.
• Shipping Orders: Address information ensures your orders are shipped to the correct location.
• Personalization: Browsing and purchase history help us personalize your experience and improve our services.
• Customer Support: Communication data assists us in delivering effective customer support and marketing communications.
• Website Functionality: Device information helps us improve the functionality and security of our website.

User Rights

You have several rights regarding your personal data:

• Access, Correct, or Delete: You can access, correct, or delete your personal information at any time.
• Data Portability: Request a copy of your data in a commonly used format for your own use.
• Object to Processing: Object to the processing of your personal data for direct marketing and other purposes.
• Lodge a Complaint: File a complaint with a supervisory authority if you believe your data is being processed unlawfully.
• Restrict Processing: Request a restriction on the processing of your personal data in certain circumstances.
• Withdraw Consent: Withdraw your consent for the processing of personal data at any time, where consent is the lawful basis.

Legal Requirements

Our privacy practices adhere to the following legal requirements and regulations:

• General Data Protection Regulation (GDPR): Ensures your data is collected and processed lawfully, fairly, and transparently.
• California Consumer Privacy Act (CCPA): Provides additional rights to residents of California regarding their personal data.
• Payment Card Industry Data Security Standard (PCI DSS): Ensures secure processing of payment information.

Third-Party Sharing

We share user data with third parties only for specific purposes and with necessary protections to ensure data privacy and security:

• Payment Processing: Sharing personal and payment information with our payment processing partners to process transactions and prevent fraud.
• Order Fulfillment: Shipping and logistics partners require access to user address and contact information to deliver orders.
• Personalized Advertising: Browsing and purchase history may be shared with advertising partners to improve ad relevance.
• Customer Support: Communication data may be shared with support service providers to ensure excellent service.
• Legal Compliance: Information may be shared with law enforcement, government entities, or legal advisors for legal processes and the protection of our rights.

These third parties are contractually obligated to use the data only for specified purposes and to protect it as per our privacy standards.

Data Security

We take comprehensive measures to protect your data:

• Encryption: All user data is encrypted and stored securely using the latest security protocols.
• Access Control: Access to user data is limited to authorized personnel who need it to perform their duties.
• Regular Reviews: We regularly review and update our security measures to meet the highest standards.
• PCI DSS Compliance: Our website complies with PCI DSS for secure processing of payment information.
• Firewalls & Security Software: We use industry-leading firewalls and security software to protect against unauthorized access and cyber threats.
• Password Hashing: User passwords are hashed to ensure they are securely stored.
• Security Audits: Regular security audits and testing are conducted to identify and address vulnerabilities.
• Breach Response: In the event of a data breach, we have procedures to immediately assess, contain, and mitigate the impact.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Comments Policy

We value and encourage the engagement of our users through comments on our platform. However, to maintain a respectful and constructive environment, we have established the following comments policy:

• Respectful Discourse: All users are expected to interact respectfully. Any form of hate speech, harassment, or offensive language will not be tolerated.
• Relevance: Comments should be relevant to the topic at hand. Off-topic comments may be removed to maintain focus and clarity.
• Privacy: Do not share personal or sensitive information in comments. This is to protect your privacy and the privacy of others.
• Spam: Spamming is strictly prohibited. This includes posting repetitive comments or links to unrelated websites.
• Legal Content: Comments must not contain any content that is illegal, defamatory, or violates intellectual property rights.
• Moderation: We reserve the right to moderate, edit, or delete comments that do not adhere to these guidelines.

Failure to comply with this policy may result in comments being removed and repeated violations could lead to the suspension or banning of the offending user. We thank you for your cooperation in creating a positive and productive community

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded Content

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Data Retention

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Contact Us

If you have any questions or concerns about our Privacy Policy or how we handle your personal data, please contact us at:

• Email: support@cryptidcornucopia.com
• Phone: (256) 808-6298
• Contact Page

Thank you for trusting The Cryptid Cornucopia with your personal information. We are committed to protecting your privacy and ensuring a safe and secure experience on our website.

—

Last updated: June 4, 2024

The Cryptid Cornucopia reserves the right to update this Privacy Policy at any time. We will notify you of significant changes by posting the new policy on our website.